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AMENDMENTS TO THE CLAIMS: 

Please amend claims 1, 8, 12, 19, 23, 30, 34, 41, 45, 52, 56 and 63 as follows. 
This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1. (currently amended) A computer program product comprising a computer program 
operable to control a reporting computer to report occurrence of an event to a receiving 
computer, said computer program comprising: 

report generating logic operable to generate report data identifying said reporting 
computer and said event; 

data retrieving logic operable to fetch requested data from said receiving computer to said 
reporting computer upon a request of said reporting computer; and 

report sending logic operable to send said report data from said reporting computer to 
said receiving computer upon f e tchin g during said fetch of said requested data. 

2. (original) A computer program product as claimed in claim 1, wherein said event is 
detection of a computer file containing an unwanted computer program. 

3. (original) A computer program product as claimed in claim 2, wherein said unwanted 
computer program is a computer virus. 

4. (original) A computer program product as claimed in claim 1, wherein said requested 
data is a description of said event. 
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5. (original) A computer program product as claimed in claim 1, wherein said event is 
detection of a computer file containing a computer virus and said requested data is a description 
of said computer virus. 

6. (original) A computer program product as claimed in claim 1, wherein said event is 
detection of a computer file containing a computer virus and said requested data is an updated set 
of computer virus detecting data for use in detecting computer viruses. 

7. (original) A computer program product as claimed in claim 1, wherein said data 
retrieving logic and said report sending logic use an internet URL to specify said requested data 
to said receiving computer, said internet URL also containing said report data to be sent to said 
receiving computer. 

8. (currently amended) A computer program product as claimed in claim 1, wherein said 
reporting computer collates report data specifying one or more events that is sendsent together 
from said reporting computer to said receiving computer upon fetchin g during said fetch of said 
requested data. 

9. (original) A computer program product as claimed in claim 1, wherein said report data 
is encrypted by said reporting computer and decrypted by said receiving computer. 
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10. (original) A computer program product as claimed in claim 1, wherein said reporting 
computer and said receiving computer communicate via an internet link. 

11. (original) A computer program product as claimed in claim 1, wherein said report 
data includes one or more of: 

a MAC address identifying a network card of said reporting computer; 
a date of said event; 
a time of said event; 

an identifier of a computer program used by said reporting computer to detect said event; 
an identifier of a version of a computer program used by said reporting computer to 
detect said event; 

an identifier of a set of event detecting data used by a computer program used by said 
reporting computer to detect said event; 

an identifier of an event type detected by said reporting computer; 

an action taken by said reporting computer upon detection of said event; and 

a checksum of a file that triggered said event. 

12. (currently amended) A computer program product comprising a computer program 
operable to control a receiving computer to receive a report of occurrence of an event from a 
reporting computer, said computer program comprising: 

data request receiving logic operable to receive a request for requested data from said 
reporting computer; 



-4- 



934988 



WOLFF et al 

Appl. No. 09/854,492 

March 16, 2005 

data providing logic operable to provide said requested data to said reporting computer; 

and 

report receiving logic operable to receive report data identifying said reporting computer 
and said event from said reporting computer ^^po ftduring providing of said requested data to said 
reporting computer. 

13. (original) A computer program product as claimed in claim 12, wherein said event is 
detection of a computer file containing an unwanted computer program. 

14. (original) A computer program product as claimed in claim 13, wherein said 
unwanted computer program is a computer virus. 

15. (original) A computer program product as claimed in claim 12, wherein said 
requested data is a description of said event. 

16. (original) A computer program product as claimed in claim 12, wherein said event is 
detection of a computer file containing a computer virus and said requested data is a description 
of said computer virus. 

17. (original) A computer program product as claimed in claim 12, wherein said event is 
detection of a computer file containing a computer virus and said requested data is an updated set 
of computer virus detecting data for use in detecting computer viruses. 
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18. (original) A computer program product as claimed in claim 12, wherein said request 
uses an internet URL to specify said requested data to said receiving computer, said internet 
URL also containing said report data to be sent to said receiving computer. 

19. (currently amended) A computer program product as claimed in claim 12, wherein 
said report data specifies one or more events and is seftdsent together from said reporting 
computer to said receiving computer ypenduring providing of said requested data. 

20. (original) A computer program product as claimed in claim 12, wherein said report 
data is encrypted by said reporting computer and decrypted by said receiving computer. 

21. (original) A computer program product as claimed in claim 12, wherein said reporting 
computer and said receiving computer communicate via an internet link. 

22. (original) A computer program product as claimed in claim 12, wherein said report 
data includes one or more of: 

a MAC address identifying a network card of said reporting computer; 
a date of said event; 
a time of said event; 

an identifier of a computer program used by said reporting computer to detect said event; 
an identifier of a version of a computer program used by said reporting computer to 
detect said event; 
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an identifier of a set of event detecting data used by a computer program used by said 
reporting computer to detect said event; 

an identifier of an event type detected by said reporting computer; and 

an action taken by said reporting computer upon detection of said event; and 

a checksum of a file that triggered said event. 

23. (currently amended) A method of controlling a reporting computer to report 
occurrence of an event to a receiving computer, said method comprising the steps of: 

generating report data identifying said reporting computer and said event; 

fetching requested data from said receiving computer to said reporting computer upon a 
request of said reporting computer; and 

sending said report data from said reporting computer to said receiving computer 
upen duiing fetching of said requested data. 

24. (original) A method as claimed in claim 23, wherein said event is detection of a 
computer file containing an unwanted computer program. 

25. (original) A method as claimed in claim 24, wherein said unwanted computer 
program is a computer virus. 

26. (original) A method as claimed in claim 23, wherein said requested data is a 
description of said event. 
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27. (original) A method as claimed in claim 23, wherein said event is detection of a 
computer file containing a computer virus and said requested data is a description of said 
computer virus. 

28. (original) A method as claimed in claim 23, wherein said event is detection of a 
computer file containing a computer virus and said requested data is an updated set of computer 
virus detecting data for use in detecting computer viruses. 

29. (original) A method as claimed in claim 23, wherein said data retrieving logic and 
said report sending logic use an internet URL to specify said requested data to said receiving 
computer, said internet URL also containing said report data to be sent to said receiving 
computer. 

30. (currently amended) A method as claimed in claim 23, wherein said reporting 
computer collates report data specifying one or more events that is seftdsent together from said 
reporting computer to said receiving computer ijpenduring fetching of said requested data. 

3L (original) A method as claimed in claim 23, wherein said report data is encrypted by 
said reporting computer and decrypted by said receiving computer. 

32. (original) A method as claimed in claim 23, wherein said reporting computer and said 
receiving computer communicate via an internet link. 
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33. (original) A method as claimed in claim 23, wherein said report data includes one or 
more of: 

a MAC address identifying a network card of said reporting computer; 
a date of said event; 
a time of said event; 

an identifier of a computer program used by said reporting computer to detect said event; 
an identifier of a version of a computer program used by said reporting computer to 
detect said event; 

an identifier of a set of event detecting data used by a computer program used by said 
reporting computer to detect said event; 

an identifier of an event type detected by said reporting computer; 

an action taken by said reporting computer upon detection of said event; and 

a checksum of a file that triggered said event. 

34. (currently amended) A method of controlling a receiving computer to receive a report 
of occurrence of an event from a reporting computer, said method comprising the steps of: 

receiving a request for requested data from said reporting computer; 
providing said requested data to said reporting computer; and 
receiving report data identifying said reporting computer and said event from said 
reporting computer wpen^during providing of said requested data to said reporting computer. 

35. (original) A method as claimed in claim 34, wherein said event is detection of a 
computer file containing an unwanted computer program. 
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36. (original) A method as claimed in claim 35, wherein said unwanted computer 
program is a computer virus. 

37. (original) A method as claimed in claim 34, wherein said requested data is a 
description of said event. 

38. (original) A method as claimed in claim 34, wherein said event is detection of a 
computer file containing a computer virus and said requested data is a description of said 
computer virus. 

39. (original) A method as claimed in claim 34, wherein said event is detection of a 
computer file containing a computer virus and said requested data is an updated set of computer 
virus detecting data for use in detecting computer viruses. 

40. (original) A method as claimed in claim 34, wherein said request uses an internet 
URL to specify said requested data to said receiving computer, said internet URL also containing 
said report data to be sent to said receiving computer. 

4L (currently amended) A method as claimed in claim 34, wherein said report data 
specifies one or more events and is seftdsent together from said reporting computer to said 
receiving computer ttpeftduring providing of said requested data. 



- 10- 



934988 



WOLFF et al. 

Appl. No. 09/854,492 

March 16, 2005 

42. (original) A method as claimed in claim 34, wherein said report data is encrypted by 
said reporting computer and decrypted by said receiving computer. 

43. (original) A method as claimed in claim 34, wherein said reporting computer and said 
receiving computer communicate via an internet link. 

44. (original) A method as claimed in claim 34, wherein said report data includes one or 
more of: 

a MAC address identifying a network card of said reporting computer; 
a date of said event; 
a time of said event; 

an identifier of a computer program used by said reporting computer to detect said event; 
an identifier of a version of a computer program used by said reporting computer to 
detect said event; 

an identifier of a set of event detecting data used by a computer program used by said 
reporting computer to detect said event; 

an identifier of an event type detected by said reporting computer; and 

an action taken by said reporting computer upon detection of said event; and 

a checksum of a file that triggered said event. 

45. (currently amended) A reporting computer operable to report occurrence of an event 
to a receiving computer, said reporting computer comprising: 
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a report generator operable to generate report data identifying said reporting computer 
and said event; 

a data retriever operable to fetch requested data from said receiving computer to said 
reporting computer upon a request of said reporting computer; and 

a report sender operable to send said report data from said reporting computer to said 
receiving computer upon fetchin g during said fetch of said requested data. 

46. (original) A reporting computer as claimed in claim 45, wherein said event is 
detection of a computer file containing an unwanted computer program. 

47. (original) A reporting computer as claimed in claim 46, wherein said unwanted 
computer program is a computer virus. 

48. (original) A reporting computer as claimed in claim 45, wherein said requested data is 
a description of said event. 

49. (original) A reporting computer as claimed in claim 45, wherein said event is 
detection of a computer file containing a computer virus and said requested data is a description 
of said computer virus. 

50. (original) A reporting computer as claimed in claim 45, wherein said event is 
detection of a computer file containing a computer virus and said requested data is an updated set 
of computer virus detecting data for use in detecting computer viruses. 
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51. (original) A reporting computer as claimed in claim 45, wherein said data retrieving 
logic and said report sending logic use an internet URL to specify said requested data to said 
receiving computer, said internet URL also containing said report data to be sent to said 
receiving computer. 

52. (currently amended) A reporting computer as claimed in claim 45, wherein said 
reporting computer collates report data specifying one or more events that is sendsent together 
from said reporting computer to said receiving computer upon fetchin g during said fetch of said 
requested data. 

53. (original) A reporting computer as claimed in claim 45, wherein said report data is 
encrypted by said reporting computer and decrypted by said receiving computer. 

54. (original) A reporting computer as claimed in claim 45, wherein said reporting 
computer and said receiving computer communicate via an internet link. 

55. (original) A reporting computer as claimed in claim 45, wherein said report data 
includes one or more of: 

a MAC address identifying a network card of said reporting computer; 
a date of said event; 
a time of said event; 

an identifier of a computer program used by said reporting computer to detect said event; 
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an identifier of a version of a computer program used by said reporting computer to 
detect said event; 

an identifier of a set of event detecting data used by a computer program used by said 
reporting computer to detect said event; 

an identifier of an event type detected by said reporting computer; 

an action taken by said reporting computer upon detection of said event; and 

a checksum of a file that triggered said event. 

56. (currently amended) A receiving computer operable to receive a report of occurrence 
of an event from a reporting computer, said receiving computer comprising: 

a data request receiver operable to receive a request for requested data from said 
reporting computer; 

a data provider operable to provide said requested data to said reporting computer; and 
a report receiver operable to receive report data identifying said reporting computer and 

said event from said reporting computer upoft during providing of said requested data to said 

reporting computer. 

57. (original) A receiving computer as claimed in claim 56, wherein said event is 
detection of a computer file containing an unwanted computer program. 

58. (original) A receiving computer as claimed in claim 57, wherein said unwanted 
computer program is a computer virus. 
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59. (original) A receiving computer as claimed in claim 56, wherein said requested data is 
a description of said event. 

60. (original) A receiving computer as claimed in claim 56, wherein said event is 
detection of a computer file containing a computer virus and said requested data is a description 
of said computer virus. 

61. (original) A receiving computer as claimed in claim 56, wherein said event is 
detection of a computer file containing a computer virus and said requested data is an updated set 
of computer virus detecting data for use in detecting computer viruses. 

62. (original) A receiving computer as claimed in claim 56, wherein said request uses an 
internet URL to specify said requested data to said receiving computer, said internet URL also 
containing said report data to be sent to said receiving computer. 

63. (currently amended) A receiving computer as claimed in claim 56, wherein said 
report data specifies one or more events and is sendsent together from said reporting computer to 
said receiving computer «peftduring providing of said requested data. 

64. (original) A receiving computer as claimed in claim 56, wherein said report data is 
encrypted by said reporting computer and decrypted by said receiving computer. 
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65. (original) A receiving computer as claimed in claim 56, wherein said reporting 
computer and said receiving computer communicate via an internet link. 

66. (original) A receiving computer as claimed in claim 56, wherein said report data 
includes one or more of: 

a MAC address identifying a network card of said reporting computer; 
a date of said event; 
a time of said event; 

an identifier of a computer program used by said reporting computer to detect said event; 
an identifier of a version of a computer program used by said reporting computer to 
detect said event; 

an identifier of a set of event detecting data used by a computer program used by said 
reporting computer to detect said event; 

an identifier of an event type detected by said reporting computer; and 

an action taken by said reporting computer upon detection of said event; and 

a checksum of a file that triggered said event. 
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